$ rpki-client -vvvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft File: 8R8km4Id_MKxuXr05wUm3ZM6En0.mft (raw, json) Hash identifier: vcXIcYOe2UWQoO0Ps+CBUYSyHKrYTNAWbq9EOGmCL3U= Subject key identifier: E2:A8:B6:43:C3:24:23:64:8C:8D:9D:AF:D1:8C:29:80:82:4A:C9:40 Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Certificate serial: 0262 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft Manifest number: 0253 Signing time: Sun 01 Nov 2026 03:25:22 +0000 Manifest this update: Sun 01 Nov 2026 03:25:21 +0000 Manifest next update: Sun 08 Nov 2026 03:25:21 +0000 Files and hashes: 1: 8R8km4Id_MKxuXr05wUm3ZM6En0.crl (hash: QC/+iDgB95YKCtgfodWFe5tiV2titEwAj3J/eSPVDxQ=) 2: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (hash: XUpTex2TyIZeV2jlWn4kVYAZNBKYz6I1bQhUt2laexg=) 3: B3677C08D2AA11F0850BC856C4F9AE02.roa (hash: 7B2jTuJhR75hg2hiTaxxw5JuXQYXjo1zg7Jb4NnaE+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Nov 2026 03:25:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 610 (0x262) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Validity Not Before: Nov 1 03:25:21 2026 GMT Not After : Nov 8 03:25:21 2026 GMT Subject: CN=6ae6b122-5a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:32:95:6d:7f:b9:03:60:f8:50:67:3b:56:e5: 26:f5:bd:5f:1a:bd:a2:07:0a:88:0c:45:c4:95:e8: 35:fd:3f:46:2d:2b:7a:1f:16:f0:83:b3:22:56:fd: e6:fe:10:37:87:8d:26:55:12:49:88:6a:ae:89:4c: 9b:fd:e7:8e:d3:33:15:0e:35:ed:93:dd:67:2d:63: 7d:97:41:b5:8c:f1:8c:33:f6:48:4e:7b:2a:d0:33: 38:43:96:d1:e9:71:b6:ac:f9:a7:8c:be:0a:33:01: 25:d3:95:2b:0d:0f:85:91:38:c5:02:08:98:57:ee: 43:09:bd:7d:8f:38:76:49:c9:f7:f2:70:74:0c:06: bb:cf:1c:13:5e:e6:c9:35:19:8a:b1:5f:e8:54:75: c9:88:53:f4:28:6b:4e:56:a3:8b:9f:64:2a:ef:98: 7e:93:fc:a0:3d:a4:44:e2:e7:2f:83:b0:0a:63:66: 25:05:07:0e:9e:5d:56:6b:5f:a3:36:07:72:15:c6: d3:9c:e9:4e:d6:ea:89:7b:56:e4:00:aa:82:71:31: f2:7a:b1:e1:93:8f:4e:c7:9d:26:25:86:95:fa:a4: b8:bc:5c:cf:73:a2:08:c5:5c:77:86:21:e3:8e:c3: f1:5f:01:4d:89:9c:88:4b:0e:0e:bb:ea:a2:6e:57: f3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A8:B6:43:C3:24:23:64:8C:8D:9D:AF:D1:8C:29:80:82:4A:C9:40 X509v3 Authority Key Identifier: keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:5d:dc:01:00:1e:97:d2:1b:a8:dc:1e:e3:44:27:ef:d6:47: 5b:f6:ac:2e:c2:14:d3:6d:dc:28:7c:57:14:cd:64:24:2d:99: 31:fa:5d:82:cb:9e:da:2e:4a:22:10:e5:f8:13:a5:34:83:3b: 4a:f6:d4:a9:93:9a:b3:b3:4b:73:fd:e0:29:89:5b:69:fc:b1: ab:39:36:a1:d4:ba:46:b1:e4:09:14:fb:e0:fa:6d:0c:29:e5: 6b:a4:e1:ca:d3:b2:0f:83:19:b5:a8:65:49:24:51:37:61:73: e4:99:14:25:6c:dc:0c:d9:39:90:63:16:00:99:b7:08:48:cb: 1f:59:e1:54:e3:2f:2a:21:c1:f3:a3:88:e2:74:d8:f5:d1:df: a8:08:83:c4:92:bb:68:c2:78:03:a0:d9:20:73:c0:16:9a:1b: c0:e8:e6:32:00:2c:a3:99:69:d9:d3:67:88:41:82:29:e2:7e: 82:34:fe:b6:62:4d:75:72:a2:ce:e8:ab:40:e0:47:14:50:fa: 3b:6c:6e:13:2f:a9:0f:3e:bd:92:42:77:9d:98:ac:f0:72:cb: 24:a8:40:20:9b:c3:8d:48:35:bd:64:5b:5b:84:37:70:79:dc: 3a:46:2e:b5:36:64:df:5a:97:16:11:18:cb:7c:0f:b2:bb:29: f2:01:8d:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGMjUxMTAvBgNVBAUTKEYxMUYyNDlCODIxREZDQzJCMUI5N0FGNEU3MDUyNkRE OTMzQTEyN0QwHhcNMjYxMTAxMDMyNTIxWhcNMjYxMTA4MDMyNTIxWjAYMRYwFAYD VQQDEw02YWU2YjEyMi01YTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2DKVbX+5A2D4UGc7VuUm9b1fGr2iBwqIDEXEleg1/T9GLSt6Hxbwg7MiVv3m /hA3h40mVRJJiGquiUyb/eeO0zMVDjXtk91nLWN9l0G1jPGMM/ZITnsq0DM4Q5bR 6XG2rPmnjL4KMwEl05UrDQ+FkTjFAgiYV+5DCb19jzh2Scn38nB0DAa7zxwTXubJ NRmKsV/oVHXJiFP0KGtOVqOLn2Qq75h+k/ygPaRE4ucvg7AKY2YlBQcOnl1Wa1+j NgdyFcbTnOlO1uqJe1bkAKqCcTHyerHhk49Ox50mJYaV+qS4vFzPc6IIxVx3hiHj jsPxXwFNiZyISw4Ou+qiblfzKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOKotkPD JCNkjI2dr9GMKYCCSslAMB8GA1UdIwQYMBaAFPEfJJuCHfzCsbl69OcFJt2TOhJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkYyNS82MDY0QkFCMjUy RjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9NS3h1WHIwNXdVbTNaTTZF bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkYyNS82MDY0QkFCMjUyRjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9N S3h1WHIwNXdVbTNaTTZFbjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATl3cAQAel9IbqNwe40Qn79ZHW/asLsIU023cKHxXFM1kJC2ZMfpdgsue2i5K IhDl+BOlNIM7SvbUqZOas7NLc/3gKYlbafyxqzk2odS6RrHkCRT74PptDCnla6Th ytOyD4MZtahlSSRRN2Fz5JkUJWzcDNk5kGMWAJm3CEjLH1nhVOMvKiHB86OI4nTY 9dHfqAiDxJK7aMJ4A6DZIHPAFpobwOjmMgAso5lp2dNniEGCKeJ+gjT+tmJNdXKi zuirQOBHFFD6O2xuEy+pDz69kkJ3nZis8HLLJKhAIJvDjUg1vWRbW4Q3cHncOkYu tTZk31qXFhEYy3wPsrsp8gGNhA== -----END CERTIFICATE-----Generated at Sun Nov 1 13:02:30 2026 by rpki-client